Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/860d0f20-14ec-3d26-8275-f31ede84c5e7.roa
File:                     860d0f20-14ec-3d26-8275-f31ede84c5e7.roa (raw, json)
Hash identifier:          41jMsr/H5jWHdZE0wGH3YY0//PJvkBovxV+Msui8J8I=
Subject key identifier:   DE:0F:02:26:DB:E8:87:3A:D1:B9:2B:05:56:3D:21:FD:7F:DD:06:C4
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D14A570520406D4FD870CA380
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/860d0f20-14ec-3d26-8275-f31ede84c5e7.roa
Signing time:             Mon 28 Feb 2022 05:00:00 +0000
ROA not before:           Mon 28 Feb 2022 05:00:00 +0000
ROA not after:            Mon 04 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        153.12.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:14:a5:70:52:04:06:d4:fd:87:0c:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 28 05:00:00 2022 GMT
            Not After : Apr  4 04:00:00 2022 GMT
        Subject: CN=b8b6e134-69a1-4d70-9b98-95e1f14f9e2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:0b:93:fc:c4:31:b9:39:c8:c4:08:82:11:cb:
                    0f:6a:5c:32:f4:4d:04:0c:9a:a5:31:ff:20:41:19:
                    4d:56:76:5e:41:d7:cd:a3:0d:54:e4:a8:42:b0:6f:
                    59:80:67:3f:95:62:64:41:40:32:49:79:40:be:b7:
                    d7:1b:a0:d5:29:5d:59:5e:ee:b7:6b:37:83:1d:16:
                    30:7f:e0:f0:0a:1c:50:94:5f:ad:b1:a1:e8:ba:cc:
                    27:bc:bb:38:b0:d9:bb:06:5e:b1:fd:93:2e:ff:e0:
                    10:f2:16:72:04:a8:9e:5d:16:9b:3b:22:a4:6e:19:
                    25:d0:b7:e1:54:b8:44:81:5c:eb:c8:2a:85:86:9f:
                    b4:56:73:95:ca:15:75:42:68:ef:3a:11:72:01:80:
                    04:c3:1c:5d:6e:5c:db:0a:52:1d:12:f8:8d:97:59:
                    84:54:f5:3b:2b:cb:09:00:5f:ca:d7:38:20:ec:da:
                    14:6c:f4:4f:74:9e:89:7c:ae:14:ca:2c:82:f5:00:
                    a1:d5:c3:24:da:96:24:a9:e5:54:80:6a:2b:03:64:
                    d9:08:ef:b5:ed:66:a8:62:b5:4d:bf:98:12:61:6b:
                    43:57:00:59:3c:67:98:3d:f7:17:48:27:29:2c:79:
                    8f:9b:f7:e1:a2:41:90:45:c2:af:44:0f:e8:76:27:
                    53:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:0F:02:26:DB:E8:87:3A:D1:B9:2B:05:56:3D:21:FD:7F:DD:06:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/860d0f20-14ec-3d26-8275-f31ede84c5e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.12.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:81:3e:86:8d:27:38:55:07:19:35:1f:b1:a6:cb:df:4e:c3:
         5f:08:a1:de:a5:a0:58:f3:de:a2:88:b5:62:02:37:8f:a1:3f:
         ba:f2:83:4d:64:e5:ed:64:70:af:6b:7e:d4:aa:eb:55:93:12:
         82:01:f2:0d:9b:06:0b:b0:fd:f9:9c:ea:b2:63:6f:53:bc:67:
         6b:71:2a:39:78:b4:b8:32:b3:94:f8:6d:49:e3:e3:48:26:24:
         da:a1:29:74:94:47:59:7a:e5:5f:97:bf:1d:32:b5:20:b1:24:
         c4:0f:23:3f:14:e9:01:7e:6d:c6:09:c0:1e:41:ed:61:dd:de:
         74:8a:91:fa:d0:6f:04:c5:41:94:2f:f4:d5:2a:83:13:9a:e1:
         22:72:97:4d:ff:60:06:a0:13:e4:54:52:ee:fe:eb:30:39:9a:
         fb:e0:88:b1:c0:31:ad:2f:e5:9a:fc:04:20:5c:87:29:23:46:
         d7:e3:c1:ba:84:35:d4:32:cf:db:90:e3:86:a3:7a:90:de:22:
         d0:63:f3:10:6b:a1:30:78:9a:1b:54:dc:af:56:49:9a:73:a0:
         d1:d5:42:c8:0e:de:b1:07:28:01:dc:31:42:c0:ab:bc:5c:eb:
         e4:9c:9d:0d:af:b2:9a:6a:05:2d:bb:8a:06:9b:bb:d7:fd:93:
         81:53:7a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:34:35 2025 by rpki-client